CVE-2020-8190

HIGH

Citrix Application Delivery Controller Firmware < 10.5-70.18 - Privilege Escalation

Title source: rule

Description

Incorrect file permissions in Citrix ADC and Citrix Gateway before versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows privilege escalation.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://support.citrix.com/article/CTX276688

Scores

CVSS v3 7.5

EPSS 0.0027

EPSS Percentile 50.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-281

Status published

Products (3)

citrix/application_delivery_controller_firmware 10.5 - 10.5-70.18

citrix/gateway_firmware 13.0 - 13.0-58.30

citrix/netscaler_gateway_firmware 10.5 - 10.5-70.18

Published Jul 10, 2020

Tracked Since Feb 18, 2026